Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: sZ/BAF/025QlPScAs/6MMQ5EswCcKQ5ginOwYXUxrtc=
Subject key identifier: 70:4A:9D:79:9F:C1:E5:86:BD:62:D3:16:70:A9:D9:9C:9E:A5:94:0F
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019F9D03EAAE3FB07D801B5442AE2EE26718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 08B5
Signing time: Sun 26 Jul 2026 06:01:47 +0000
Manifest this update: Sun 26 Jul 2026 06:01:47 +0000
Manifest next update: Mon 27 Jul 2026 06:01:47 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: S9KBlqrAHpgGA7mWimQjaw5QxZ53JFlF3+b2tB+oVGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:03:ea:ae:3f:b0:7d:80:1b:54:42:ae:2e:e2:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Jul 26 06:01:47 2026 GMT
Not After : Jul 27 06:01:47 2026 GMT
Subject: CN=704a9d799fc1e586bd62d31670a9d99c9ea5940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:39:0e:c2:59:51:68:d5:39:57:36:8c:3b:
4c:b7:51:1f:f6:ff:ee:79:fa:34:b1:92:f0:58:9b:
b3:78:23:b7:0d:ea:3d:83:41:63:7a:25:af:cf:60:
6c:29:e0:d3:b0:68:b4:4f:ec:11:d2:c4:11:83:2d:
72:2e:1f:a1:bd:6e:76:d8:94:76:4e:66:76:aa:02:
bc:88:aa:a4:46:17:b2:cd:a4:3e:15:79:d4:89:85:
09:c7:41:13:17:ba:ad:37:47:5b:c9:32:93:a8:32:
49:86:7b:37:ff:6e:d7:1a:fc:4a:d5:35:66:59:04:
f2:a3:2f:f7:1c:dc:22:77:a6:18:d9:2d:cf:48:a3:
85:dc:e9:5f:00:59:8a:04:08:36:5f:b3:4a:3c:05:
32:cb:aa:22:b3:6f:d0:1b:e6:09:71:66:22:e9:c2:
91:26:ed:f5:3c:16:fb:16:fb:03:52:1c:c1:b2:38:
85:cc:61:fc:f2:8a:55:2c:60:9d:47:10:6c:b1:b9:
0f:86:6d:23:b6:d5:d2:ad:79:60:87:a9:a8:a6:3b:
35:0d:5e:e6:70:79:24:c8:7b:4d:43:2b:e0:67:59:
15:fc:72:b5:25:f9:4c:f5:cf:85:6b:c7:ec:9c:35:
1b:dd:5f:d9:1b:9a:67:0c:6a:75:b6:e3:f7:81:34:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:9D:79:9F:C1:E5:86:BD:62:D3:16:70:A9:D9:9C:9E:A5:94:0F
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a1:89:40:5a:16:bb:b4:57:1f:3e:0e:c2:b9:39:f2:7d:62:
a1:72:d3:5e:37:09:42:ca:10:f6:1c:46:dc:7d:53:53:a0:6c:
a7:45:92:25:f4:39:8f:5d:4f:a3:88:f5:4c:fe:72:4b:c6:62:
39:b4:7e:c3:f5:60:1c:a8:61:b1:c2:af:ba:a9:ce:72:dc:b0:
a5:7b:14:34:db:5f:c7:eb:1b:22:b1:92:cc:9c:f0:85:c8:8e:
1f:10:79:9b:05:3b:05:65:f5:2e:cb:60:c1:cd:94:b3:fb:5b:
b7:ab:35:d7:32:3a:10:21:9a:c5:b3:2b:f1:ac:75:fc:8f:db:
44:e2:6e:a6:d0:3b:b2:7e:96:c4:81:74:ca:d1:1e:e3:60:35:
bd:d1:e7:b1:7c:eb:24:b9:6f:1d:99:65:50:e8:ea:2a:34:dc:
3e:fd:4b:06:c7:fc:1f:0c:07:e5:7f:62:cf:e5:47:3b:83:a9:
40:82:a4:a5:b9:07:9f:13:60:4d:e3:47:1a:62:d0:30:a3:94:
1c:7a:91:0c:17:9e:fe:5a:e5:c7:10:11:a7:c8:26:1d:fb:2b:
95:2b:81:ea:a3:42:94:27:0d:52:33:db:9e:7d:c7:84:1f:a3:
d1:da:be:2a:5e:7f:11:0f:ce:80:e2:55:8f:43:f6:b8:aa:18:
8a:13:20:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+dA+quP7B9gBtUQq4u4mcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjYwNzI2MDYwMTQ3WhcNMjYwNzI3MDYwMTQ3WjAzMTEwLwYDVQQD
Eyg3MDRhOWQ3OTlmYzFlNTg2YmQ2MmQzMTY3MGE5ZDk5YzllYTU5NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TI5DsJZUWjVOVc2jDtMt1Ef9v/u
efo0sZLwWJuzeCO3Deo9g0FjeiWvz2BsKeDTsGi0T+wR0sQRgy1yLh+hvW522JR2
TmZ2qgK8iKqkRheyzaQ+FXnUiYUJx0ETF7qtN0dbyTKTqDJJhns3/27XGvxK1TVm
WQTyoy/3HNwid6YY2S3PSKOF3OlfAFmKBAg2X7NKPAUyy6ois2/QG+YJcWYi6cKR
Ju31PBb7FvsDUhzBsjiFzGH88opVLGCdRxBssbkPhm0jttXSrXlgh6mopjs1DV7m
cHkkyHtNQyvgZ1kV/HK1JflM9c+Fa8fsnDUb3V/ZG5pnDGp1tuP3gTRcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBKnXmfweWGvWLTFnCp2ZyepZQPMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqGJQFoW
u7RXHz4Owrk58n1ioXLTXjcJQsoQ9hxG3H1TU6Bsp0WSJfQ5j11Po4j1TP5yS8Zi
ObR+w/VgHKhhscKvuqnOctywpXsUNNtfx+sbIrGSzJzwhciOHxB5mwU7BWX1Lstg
wc2Us/tbt6s11zI6ECGaxbMr8ax1/I/bROJuptA7sn6WxIF0ytEe42A1vdHnsXzr
JLlvHZllUOjqKjTcPv1LBsf8HwwH5X9iz+VHO4OpQIKkpbkHnxNgTeNHGmLQMKOU
HHqRDBee/lrlxxARp8gmHfsrlSuB6qNClCcNUjPbnn3HhB+j0dq+Kl5/EQ/OgOJV
j0P2uKoYihMgfg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:41 2026 by rpki-client